Privacy Policy.

1. Who we are

EXIT CODE (ABN 45 984 876 899) is a trading discipline tool operated by the Australian business registered under that ABN (you can confirm it with the ABN lookup at abr.business.gov.au). References to "we", "us", "our", or "EXIT CODE" mean that business.

We are not a broker and do not hold client funds. On paid plans, the Challenge Pass and EXIT CODE Founder, one-click placement works like this: you click Enter trade on a ticket that has CLEARED every gate, and EXIT CODE transmits that one order, with your stop attached, to your own connected account (cTrader through the cTrader API, MetaTrader 5 through the small Expert Advisor running in your own terminal). It never trades on its own, and it never holds a password. We do not provide financial advice. See our Terms of Service for the full description of what EXIT CODE does and does not do.

For legal correspondence, court process, or regulatory inquiries requiring the full registered legal entity name, contact info@exitcode.trade with the basis of the request. The underlying corporate trustee and trust structure are disclosed via the ABN lookup link above and are also available on direct request.

2. What information we collect

Information you provide directly

• Email address. When you join the waitlist, register for an account, or purchase a product.
• Payment information. Processed by Stripe; we never see or store your full card details.
• The Baseline submissions. When you take the pre-session check at /trade-ticket/: sleep, stress, energy, external-pressure flags, motive, your committed max-trades and R-floor, and the resulting verdict. Stored against an anonymous token (see below), not your email.
• The Delay submissions. When you take the mid-session check at /the-delay/: body-state flags, motive, override-pressure indicators, and the resulting verdict. Stored against the same anonymous token.
• Trade log data. When you log a closed trade at /trade-close/ or in the workstation: R-multiple, exit price, and session-state mutations. Stored against your anonymous token (see below), not your email.
• Broker-verified trade data (paid plans, cTrader-linked accounts). If you connect your cTrader account, EXIT CODE reads your account balance, open positions, and closed-deal fills (entry/exit price, size, time) directly from your broker via the cTrader Open API, to compute your verified realised P&L and reconcile it against what you logged. This data is stored against your anonymous token, never linked to your email or real name, and is used only to power your own journal and gate checks. You can disconnect your broker at any time from your dashboard, which deletes the access and refresh tokens we hold and stops new data being read; existing stored history is deleted on request to info@exitcode.trade.
• MetaTrader 5 account data (paid plans, MT5-linked accounts). If you connect a MetaTrader 5 account, you do it by installing a small program (the EXIT CODE Gates Expert Advisor) in your own terminal and pairing it with a one-time code. From then on that program sends us your account number, broker and server name, account currency, equity, balance, open positions, and closed trades, to power the gate checks and your firm-limit figures (the verified journal is cTrader-only for now; MetaTrader 5 follows using the same data). It cannot send your platform password: the program never sees it, and we never ask for it. The only thing we send back is an order you yourself clicked Enter trade on, after it cleared every gate; the program places that order in your terminal, with your stop attached, and reports the result. It never trades on its own. Synced account snapshots and trade records are kept for 90 days and then expire automatically. You can stop the flow at any time by removing the Expert Advisor from your terminal, and pairing a new terminal automatically disconnects the old one; stored history is deleted on request to info@exitcode.trade.
• Bybit API credentials (crypto gate check tool only). The crypto tool asks for a Bybit API key and secret to read your account balance, positions, and leverage/liquidation data for a single gate check. We ask that you generate a read-only key (no trading or withdrawal permission) in your own Bybit account; enforcing that permission is on Bybit's side, not something we can verify server-side. Your key and secret are used once for that request, sent only to Bybit's API, and are never written to our database, never logged, and never stored in any form, in memory only for the lifetime of that single request. There is currently no "connect once" flow for Bybit, unlike cTrader; every check re-supplies your credentials.
• Discord account link (optional). If you link your Discord account to your EXIT CODE subscription (to receive the role for your tier: Founder or Member), we store the mapping between your Stripe customer ID and your Discord user ID. This mapping is used to (a) grant your tier's roles automatically on purchase, (b) revoke paid roles on cancellation. No Discord message content is ever read, stored, or transmitted by EXIT CODE; the integration is role-grant only, not chat-read. Linking is initiated by you via Discord's standard OAuth flow; revoking is automatic on subscription end. To remove the link entirely, email info@exitcode.trade with your customer ID.

The anonymous token system

The Baseline, The Delay, and your personal Audit Dashboard use an opaque 16-character token generated locally in your browser on first visit. The token is stored in your browser's localStorage and passed as a query parameter in submissions. The token is not linked to your email, your real name, or your purchase identity; anyone holding the token URL can read its data, and only its data. If you clear your browser's localStorage, switch devices, or use a different browser, you start with a new token and begin a new submission history. The token IS the auth for the personal dashboard.

Information collected automatically

• IP address (hashed). All Baseline / Delay / Community / Waitlist submissions, and User Agreement acceptance records, store an irreversible SHA-256 hash (first 12 hex characters) of your IP address, not the raw IP. Used for abuse detection, de-duplication, and to evidence a signed agreement. The raw IP is observed only in transit; we do not log it.
• Browser User-Agent string (truncated to 160 characters). Used for diagnostic purposes and, on User Agreement acceptance records, to evidence the signing.
• Page views on exitcode.trade (Cloudflare Web Analytics). We use Cloudflare Web Analytics to measure aggregate traffic (pages viewed, referring sites, country, browser and device type, and page-load performance). It does not set cookies, does not use local storage, and does not build a profile of individual visitors. We do not use Google Analytics or any tool that fingerprints visitors.
• Funnel counts (our own first-party beacon). When a page loads, a small script on exitcode.trade sends us the page path and a short channel label describing how you arrived: the utm_source (and utm_campaign, if present) from the link you followed, a label for an ad click identifier (for example "google-ads"), or the host name of the referring site, otherwise "direct". We store only daily totals of views per channel, not a record per visitor, and they expire after 120 days. The first outside channel is also remembered in your browser's localStorage under the key ec_ch for 30 days, so that if you sign up for a free account that label is stored with your account record and we can tell which channel led to the signup. It sets no cookies, and it contains no email address, name, IP address or other personal information.
• Bot check on signup and login forms (Cloudflare Turnstile). To stop automated abuse of the signup and login forms, those forms use Cloudflare Turnstile. It loads only when you start using one of those forms. Cloudflare processes technical information about your browser and connection (such as your IP address and browser characteristics) to tell people from bots. When you submit the form, our server sends the resulting check token, with your IP address, to Cloudflare to confirm it, and receives a pass or fail. We do not store the information Cloudflare uses for the check. Cloudflare handles it under its own privacy policy: cloudflare.com/privacypolicy.
• Email open + click events from emails sent via Brevo (our email-delivery provider).

Cookies and browser storage

We use one cookie: ec_sess, an essential session cookie set when you sign in as a member. It holds your access token so your browser can make signed-in requests without the token appearing in a web address. It is marked HttpOnly (page scripts cannot read it) and Secure (it is sent only over HTTPS), is used only by exitcode.trade, and expires after 90 days or when you sign out. Because it is strictly necessary to provide the signed-in service you request, it is not used for analytics or advertising. We do not set advertising or tracking cookies. Separately, the site keeps some items in your browser's localStorage, including the access token that signs you in and the ec_ch channel label described above. You can clear both at any time through your browser settings.

Information we do NOT collect

• Your real name, except the name you type when you accept the User Agreement
• Your broker password or platform credentials. Connecting MetaTrader 5 never involves your password at all: the Expert Advisor runs inside your own logged-in terminal and holds only a pairing credential we issue, which you can revoke by removing it. When you connect your own cTrader account, you authorise it through cTrader's own OAuth consent screen. EXIT CODE receives an OAuth access token (expires after roughly 30 days) and a refresh token (used automatically to obtain new access tokens without asking you to reconnect; per cTrader's own documentation, refresh tokens do not expire on a fixed schedule), scoped to read your account and, on your click, place the order you specified; never your password. Disconnecting from your EXIT CODE dashboard deletes the tokens we hold; to revoke the grant itself, remove EXIT CODE under your cTrader ID's connected-apps settings.
• Your actual trade outcomes / dollar P&L, unless you connect a cTrader or MetaTrader 5 account on Challenge Pass or Founder (see "Broker-verified trade data" above). The free tier captures only gate decisions and behavioural patterns, self-reported, never financial results.
• Sensitive personal information (race, religion, health diagnoses, etc.): the body-state flags in The Delay are coarse-grained somatic indicators, not health records, and are stored against an anonymous token only
• Your raw IP address (only an irreversible hash, as above)

3. How we use your information

• To deliver the product (issue your workstation token, connect your cTrader or MetaTrader 5 account, send login links and course access, send waitlist updates, process payments)
• To improve the product (anonymous aggregate analytics on which gates fire most often, etc.)
• To respond to support requests
• To meet legal obligations (Australian Privacy Act 1988, GDPR for EU customers, CCPA for California customers)

4. Who we share your information with

We share data only with the third-party services we depend on to operate the business:

• Stripe: payment processing. Stripe stores card data; we never see or store your full card number. Stripe's privacy policy at stripe.com/au/privacy.
• Brevo (formerly Sendinblue): email delivery for waitlist nurture, welcome emails, and broadcasts. Brevo stores your email address and engagement metrics. Privacy: brevo.com/legal/privacypolicy.
• Cloudflare: application hosting (Cloudflare Pages), data storage (Cloudflare KV), audio + video delivery (R2 and Stream), aggregate site analytics (Cloudflare Web Analytics), and the bot check on signup and login forms (Cloudflare Turnstile). Cloudflare processes traffic to deliver pages and stores your submission data in encrypted KV namespaces in their global edge network. Privacy: cloudflare.com/privacypolicy.
• Discord (if you opt into the community channel): Discord stores your message content, profile, and any role assignments. Privacy: discord.com/privacy.
• Fly.io: hosting for the service that connects to cTrader on your behalf (Sydney region). When you use the live chart, positions, the journal or one-click execution on a linked cTrader account, your cTrader access token, account ID, positions and deals pass through that service while the request is handled. Privacy: fly.io/legal/privacy-policy.
• ElevenLabs: text-to-speech audio rendering for the methodology course. ElevenLabs processes script text only; no personal customer data is sent. Privacy: elevenlabs.io/privacy.
• Kit (formerly ConvertKit): email list management and course-access automation. Kit stores your email address and the tags that record which lessons and tier you have access to. Privacy: kit.com/privacy.
• Anthropic: powers the in-app help assistant, which answers as Operator Zero. If you type a question into the help widget, that message is sent to Anthropic's API to generate the reply. Please do not enter sensitive personal information into the help widget. Privacy: anthropic.com/legal/privacy.

The workstation and backtester charts are served from exitcode.trade itself, so they send no data to a charting provider.

We do not sell your data. We do not share it for advertising purposes. We do not run any tracking pixel from third parties on the site.

5. Data retention

• Waitlist email: retained until you unsubscribe via the link in any email, or contact info@exitcode.trade to request deletion.
• Stripe customer + subscription data: retained per Stripe's policy and Australian tax-record requirements (5 years for ATO compliance), then deleted on the next scheduled purge.
• The Baseline + The Delay submissions: retained against the anonymous token for 12 months by default. If you submit them at all, the data is yours; request deletion at any time by emailing info@exitcode.trade with your token, and we delete all records matching that token within 7 business days.
• Community weekly submissions: retained for the duration of the member program plus 24 months for longitudinal pattern analysis. Anonymised aggregate data may be retained indefinitely for research / case-study material; individual submissions can be deleted on participant request.
• EXIT CODE course-access data (login sessions, last-watched lesson): retained while your access is active, then deleted 30 days after access is revoked or refunded.
• cTrader OAuth tokens (access and refresh): held while your account is connected, deleted the moment you disconnect from your dashboard.
• MetaTrader 5 pairing key (the credential the Expert Advisor holds): deleted automatically when you pair a new terminal, or on request when you unlink. Removing the Expert Advisor from your terminal stops the flow immediately.
• MetaTrader 5 account snapshots and trade records: 90 days, then they expire automatically.
• Relay orders (the record of an order sent to your MetaTrader 5 terminal on your click): 24 hours, then they expire automatically. An audit line recording the outcome, without any token, is kept 90 days.
• User Agreement acceptance records (the name you typed, the email on your account, the date and time, the agreement version and a hash of its exact text, a hashed IP, country, and your browser identifier truncated to 160 characters): retained for 7 years after your access ends, because they evidence a contract you signed. Each acceptance is kept as a dated record, so a later version does not erase evidence of an earlier one.

6. Your rights

• Access. Request a copy of your data.
• Correction. Update inaccurate data.
• Deletion. Request permanent deletion ("right to be forgotten").
• Portability. Export your trade journal data in JSON format.
• Objection. Opt out of any non-essential processing.

To exercise any of these rights, email info@exitcode.trade.

7. Security

We use industry-standard encryption (TLS 1.3 in transit, AES-256 at rest). Payment data never touches our servers; Stripe handles all card processing. We do not store passwords: you sign in with a one-time login link sent to your email, and access to the workstation is granted by a private token, not a password you set.

We rely on Cloudflare, Stripe, and Brevo for infrastructure, payments, and email, and each maintains their own security controls. Our own application authentication, access controls, API-token handling, and software remain our responsibility, not something we outsource to those providers. If you are concerned about a specific threat model, contact us before subscribing.

8. International transfers

If you are in the EU, UK, or California, your data may be transferred to and processed in Australia or the United States (via our US-based service providers). We rely on Standard Contractual Clauses (EU) and equivalent transfer mechanisms.

9. Children

EXIT CODE is not for users under 18. We do not knowingly collect data from children.

10. Changes to this policy

If we make material changes, we will email registered users with at least 30 days' notice before the change takes effect.

11. Contact

Privacy concerns: info@exitcode.trade
Australian Privacy Commissioner (if you wish to complain): oaic.gov.au